Common problems and solutions for troubleshooting the Access Gateway upgrade process.
When updating from Access Gateway 2019.2.0 you must first remove the package oracle-instantclient18.3-basic.
To remove the package:
- Login to management console
- Select the System menu.
- Select Remove Package.
- Remove oracle-instantclient18.3-basic .
- Return to the System menu and select Update.
- Proceed with update normally.
If the Access Gateway yum repository is unreachable, you will receive an upgrade error resembling:
Ensure that the repository, yum.oag.okta.com, is reachable from the Access Gateway node being upgraded. You can test access using a variety of commands.
Using the Command Line Management Console, under Network choose d and then enter yum.oag.okta.com.
Access Gateway Administration ... 1 - Network ... Choice: 1 [cr] Access Gateway Network Setup . . . 1 - Manage network interfaces . . . d - DNS Lookup Choice: d [cr] IP Address/Hostname to lookup: yum.oag.okta.com [cr] IP Address/Hostname of DNS server: 22.214.171.124 [cr] Server: 126.96.36.199 Address: 188.8.131.52 Non-authoritative answer: yum.oag.okta.com canonical name = yumalb-531408569.us-west-2.elb.amazonaws.com. Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 184.108.40.206 Name: yumalb-531408569.us-west-2.elb.amazonaws.com Address: 220.127.116.11
Using traceroute ensure that their is a route to yum.oag.okta.com from inside the network hosting Access Gateway.
Note that traceroute will NOT be able to trace a complete route to yum.oag.okta.com due to limitations of AWS EC2 configuration.
traceroute yum.oag.okta.com . . . traceroute to yum. . . .amazonaws.com (. . . ), 64 hops max, 52 byte packets 1 10.0.0.1 (10.0.0.1) 5.436 ms 2.345 ms 1.925 ms 2 18.104.22.168 (22.214.171.124) 25.870 ms 11.372 ms 11.922 ms 3 126.96.36.199 (188.8.131.52) 11.035 ms 12.135 ms 11.204 ms 4 be-319-ar01.needham.ma.boston.comcast.net (184.108.40.206) 20.129 ms 13.427 ms 14.012 ms 5 be-32031-cs03.newyork.ny.ibone.comcast.net (220.127.116.11) 22.085 ms 6 be-32021-cs02.newyork.ny.ibone.comcast.net (18.104.22.168) 22.305 ms . . . <ctrl-c>
The traceroute command is not installed on Access Gateway nodes by default.